]> Frank Brehm's Git Trees - pixelpark/hiera.git/commitdiff
fbb-www - Add adslZugriff
authorPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 14 Jul 2017 16:37:14 +0000 (18:37 +0200)
committerPhilipp Dallig <philipp.dallig@pixelpark.com>
Fri, 14 Jul 2017 16:37:14 +0000 (18:37 +0200)
customer/fbb-www/production.yaml

index f1444175b5b24d58e0a6e63886f66f4715d5f891..d0f8b031850e98eb51486b57b79008b893d34799 100644 (file)
@@ -647,6 +647,32 @@ infra::profile::apache::pp_vhosts:
       - { error_code: 403 , document: "/de/global/_errors/_error403/index.php" }
       - { error_code: 404 , document: "/de/global/_errors/_error404/index.php" }
       - { error_code: 500 , document: "/de/global/_errors/_error500/index.php" }
+    setenvif:
+      # 82.145.10.128/29
+      - 'Client-IP "82\.145\.10\.(129|130|131|132|133|134)" AdslZugriffErlaubt'
+      # 82.145.10.136/29
+      - 'Client-IP "82\.145\.10\.(137|138|139|140|141|142)" AdslZugriffErlaubt'
+      # 194.174.73.0/24
+      - 'Client-IP "194\.174\.73\.\d+" AdslZugriffErlaubt'
+      # 194.174.78.0/24
+      - 'Client-IP "194\.174\.78\.\d+" AdslZugriffErlaubt'
+      # 172.18.49.24 und  172.18.39.22
+      - 'Client-IP "172\.18\.[3-4]9\.2(2|4)" AdslZugriffErlaubt'
+      # 82.144.58.192/26
+      - 'Client-IP "82\.144\.58\.(19[3-9]|2\d\d)" AdslZugriffErlaubt'
+      - 'Client-IP "89\.247\.134\.34" AdslZugriffErlaubt'
+      - 'Client-IP "89\.247\.134\.67" AdslZugriffErlaubt'
+      # Provider Vodafone
+      - 'Client-IP "89\.27\.163\.1(37|38|39|40|41|42)" AdslZugriffErlaubt'
+      - 'Client-IP "217\.66\.51\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "89\.27\.163\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "89\.27\.134\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "89\.27\.67\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "194\.174\.73\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "194\.174\.80\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "194\.174\.76\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "178\.8\.96\.\d+" AdslZugriffErlaubt'
+      - 'Client-IP "89\.\d+\.\d+\.\d+" AdslZugriffErlaubt'
     directories:
       - provider: 'directory'
         path: '/var/www/berlin-airport'
@@ -766,6 +792,12 @@ infra::profile::apache::pp_vhosts:
         options:
           - FollowSymLinks
           - Indexes
+      - provider: location
+        path: /de/global/ADSL-info
+        require: 
+          - ip 172.18.39.22 172.18.49.24 194.174.73 194.174.78 217.66.51
+          - ip 89.27.163.36/29 89.27.134.34/24 89.27.134.67/24 194.174.73.0/24 194.174.80.0/24 194.174.76.0/24
+          - env=AdslZugriffErlaubt
     aliases:
       - { alias: /starsberlin/ , path: /var/data/flugdat/starsBerlin/ }
       - { alias: /securitastxl/ , path: /var/data/flugdat/securitastxl/ }